Skip to content

pcap: 60s active / 15s inactive timeouts (0.4.0) - #4

Merged
samarmstrong merged 2 commits into
mainfrom
pcap-active-inactive-timeouts
Aug 12, 2026
Merged

pcap: 60s active / 15s inactive timeouts (0.4.0)#4
samarmstrong merged 2 commits into
mainfrom
pcap-active-inactive-timeouts

Conversation

@josiahlashley21

@josiahlashley21 josiahlashley21 commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Change PCAP flow-split defaults to active timeout 60s and inactive timeout 15s (was 1h max duration / 60s idle), with --active-timeout / --inactive-timeout CLI overrides.
  • Validate timeouts (> 0, inactive <= active); keep strict > split semantics; bump to 0.4.0.
  • Add glossary (CONTEXT.md), ADR 0001, unit tests for both split axes, and README updates.

Test plan

  • cargo test --locked (53 tests, including new pcap timeout tests)
  • cargo clippy --all-targets -- -D warnings
  • cargo fmt --all -- --check
  • Confirm CI green on the PR
  • Smoke: flowprep pcap sample.pcap out.parquet and with explicit timeout flags

Align flowprep pcap aggregation with common NetFlow exporter practice, expose integer-second CLI overrides, and document the breaking default change for 0.4.0.

Co-authored-by: Cursor <cursoragent@cursor.com>

@samarmstrong samarmstrong left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Timeout split semantics, CLI validation, tests, and the 0.4.0 bump look correct. Dropped CONTEXT.md and the ADR so they do not land in the OSS tree; README CLI notes stay so public docs match the new defaults.

@samarmstrong
samarmstrong merged commit 8c70360 into main Aug 12, 2026
@samarmstrong
samarmstrong deleted the pcap-active-inactive-timeouts branch August 12, 2026 19:21
Keep the README CLI notes so public docs match the 0.4.0 timeout defaults.

Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants